From fde8528ea3d95bc92f0d23372d4b36f01897769f Mon Sep 17 00:00:00 2001
From: Hidetake Iwata <int128@gmail.com>
Date: Sun, 26 Oct 2025 11:56:15 +0900
Subject: [PATCH] Pin container image digest (#1432)

---
 .github/renovate.json  | 11 +++++++++++
 .github/renovate.json5 | 11 -----------
 Dockerfile             |  2 +-
 3 files changed, 12 insertions(+), 12 deletions(-)
 create mode 100644 .github/renovate.json
 delete mode 100644 .github/renovate.json5

diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..31cfeb0
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,11 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "github>int128/renovate-base",
+    "github>int128/go-renovate-config#v1.9.0",
+    "github>int128/go-renovate-config:go-version-with-dockerfile#v1.9.0",
+    "github>int128/go-renovate-config:kubernetes#v1.9.0",
+    "github>int128/go-renovate-config:github-releases#v1.9.0(**/kustomization.yaml)",
+    "helpers:pinGitHubActionDigests"
+  ]
+}
diff --git a/.github/renovate.json5 b/.github/renovate.json5
deleted file mode 100644
index 6af54a9..0000000
--- a/.github/renovate.json5
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "github>int128/renovate-base",
-    "github>int128/go-renovate-config#v1.8.0",
-    "github>int128/go-renovate-config:go-directive#v1.7.2",
-    "github>int128/go-renovate-config:kubernetes#v1.7.2",
-    "github>int128/go-renovate-config:github-releases#v1.8.0(**/kustomization.yaml)",
-    "helpers:pinGitHubActionDigests",
-  ],
-}
diff --git a/Dockerfile b/Dockerfile
index e236b86..5903ed6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM golang:1.25 AS builder
+FROM --platform=$BUILDPLATFORM golang:1.25.3@sha256:dd08f769578a5f51a22bf6a81109288e23cfe2211f051a5c29bd1c05ad3db52a AS builder
 
 WORKDIR /builder